izolacia klientov nefunguje

cin

Zdravim mam taky mensi problem mam MT 532A v bridge mam 1 ethernet a 2 karty ktore vysielaju na 2,4 GHz. Ked na kartach vypnem default forward tak aj tak viem zakaznikov vramci jednej karty od jedneho zakaznika k druhemu pingovat takze sa mi zda ze ta izolacia nefunguje :( nevedeli by ste mi poradit ako na to ?? A ako by sa dalo nastavit to aby som odizoloval zakaznikov vramci kariet navzajom. Iny rozsah IP nemozem dat.

net_work

Zdravim mam taky mensi problem mam MT 532A v bridge mam 1 ethernet a 2 karty ktore vysielaju na 2,4 GHz. Ked na kartach vypnem default forward tak aj tak viem zakaznikov vramci jednej karty od jedneho zakaznika k druhemu pingovat takze sa mi zda ze ta izolacia nefunguje :( nevedeli by ste mi poradit ako na to ?? A ako by sa dalo nastavit to aby som odizoloval zakaznikov vramci kariet navzajom. Iny rozsah IP nemozem dat.

zkus jeste hodit toho klienta do access listu a tam take odskrtnout default forward...

cin

Super pomohlo to a nevedel by si ako odizolovat klientov vramci 2 wifi kariet ? aby ty co su na 1 nemohli komunikovat z tymi co su na druhej karte? mam tie 2 karty a 1 ethernet v bridge ?

ikvac

ip - firewall - filter rules

zero

ip - firewall - filter rules

chain=forward in-interface=wlan1 out-interface=!ether1 action=drop

chain=forward in-interface=wlan2 out-interface=!ether1 action=drop

cin

ip - firewall - filter rules

chain=forward in-interface=wlan1 out-interface=!ether1 action=drop

chain=forward in-interface=wlan2 out-interface=!ether1 action=drop

a co tak b polozke bridge zapnut filter forward drop ???

zero

ip - firewall - filter rules

chain=forward in-interface=wlan1 out-interface=!ether1 action=drop

chain=forward in-interface=wlan2 out-interface=!ether1 action=drop

a co tak b polozke bridge zapnut filter forward drop ???

ja se bridgi vyhejbam jak cert krizi, tak v tom Ti neporadim

ikvac

ip - firewall - filter rules

chain=forward in-interface=wlan1 out-interface=!ether1 action=drop

chain=forward in-interface=wlan2 out-interface=!ether1 action=drop

a co tak b polozke bridge zapnut filter forward drop ???

hm a co chudak provoz, kterej pres ten bridge ma projit?

fra_iesus

ip - firewall - filter rules

chain=forward in-interface=wlan1 out-interface=!ether1 action=drop

chain=forward in-interface=wlan2 out-interface=!ether1 action=drop

a co tak b polozke bridge zapnut filter forward drop ???

hm a co chudak provoz, kterej pres ten bridge ma projit?

bez problemu funguje:

bridge > filter >

chain=forward out-interface=!ether1 action=drop in-interface=wlan1

chain=forward out-interface=!ether1 action=drop in-interface=wlan2

...

berkoff

takze:

pro spoje 3x WLAN AP + ETH vse v bridgi

vyzkouseno na RB 133 a 333, nastavit v bridge + filter FORWARD WLAN0 - WLAN1 - DROP, udelat to mezi 1 - 2, 1-3, 2-3 a z karty na kartu to nejede.

Podrobneji popisu ve svem blogu.

📡 Telekomunikace.cz